Repository navigation

Heartbeat + clean-exit so slow sign-ins recover instead of stranding the user - #154

Merged

aspiers merged 21 commits into

mainfrom

fix/otp-resend-after-par-expiry

May 5, 2026

Commits on May 4, 2026
- test(e2e): repro OAuth dead-ends when PAR dies before user completes (NO FIX)
  
  aspiers
  and
  claude
  committed
  ba8f268
- docs(design): PAR expiry, heartbeats, and clean-exit strategy
  
  aspiers
  and
  claude
  committed
  64c50f7
- feat(auth-service): keep PAR alive while user sits on OTP / recovery form
  
  aspiers
  and
  claude
  committed
  b1fc940
- test(e2e): cover @par-heartbeat liveness end-to-end
  
  aspiers
  and
  claude
  committed
  339aba3
- feat(auth-service,pds-core): redirect to OAuth client on sign-in failure instead of stranding the user
  
  aspiers
  and
  claude
  committed
  2e4d327
- docs(design): record heartbeat + clean-exit landed in the design doc
  
  aspiers
  and
  claude
  committed
  5183b7b
- fix(demo): mark /client-metadata.json route dynamic so EPDS_CLIENT_THEME takes effect
  
  aspiers
  and
  claude
  committed
  8bcb344
- fix: address PR #154 review feedback (CodeRabbit + Copilot + SonarQube + Blacksmith)
  
  aspiers
  and
  claude
  committed
  9fb0e69
- fix(demo): default EPDS_CLIENT_THEME to amber so client-branding e2e passes out of the box
  
  aspiers
  and
  claude
  committed
  3b0ec50
- test(e2e): rename "the user can try again" to "the OTP entry boxes are visible and enabled" and assert on every box
  
  aspiers
  and
  claude
  committed
  b6f3ba9
- fix(auth-service): forward no_heartbeat through recovery Verify form too
  
  aspiers
  and
  claude
  committed
  fcab1c7
- test(auth-service,shared): bring new heartbeat / clean-exit code to 100% coverage
  
  aspiers
  and
  claude
  committed
  f3766a9
- fix: address SonarCloud quality-gate findings on PR #154
  
  aspiers
  and
  claude
  committed
  241807a
- test(auth-service): unit-test buildEpdsCallbackUrl + ratchet down functions threshold
  
  aspiers
  and
  claude
  committed
  25f37aa
- fix: address third-round PR #154 review feedback
  
  aspiers
  and
  claude
  committed
  7650f14
- test(auth-service): replace `q.get(name)!` with a typed helper to clear Sonar S6606
  
  aspiers
  and
  claude
  committed
  4bc113d
- refactor(shared): extract resolveStartOverHref to fix Sonar dup-block gate
  
  aspiers
  and
  claude
  committed
  26151cd
- fix(auth-service): inline "Send a new code" action on expired-OTP error
  
  aspiers
  and
  claude
  committed
  3d31876
- test(e2e): allow inline action button alongside the OTP error message
  
  aspiers
  and
  claude
  committed
  03958c5
- fix(auth-service): don't offer Resend when it cannot complete the sign-in
  
  aspiers
  and
  claude
  committed
  86cd60f
- test(auth-service): extract heartbeat-router test harness + replace ReDoS-prone regex
  
  aspiers
  and
  claude
  committed
  160f20d

Navigation Menu

Repository navigation

Heartbeat + clean-exit so slow sign-ins recover instead of stranding the user - #154

Heartbeat + clean-exit so slow sign-ins recover instead of stranding the user#154
aspiers merged 21 commits into
mainfrom
fix/otp-resend-after-par-expiry

Commits on May 4, 2026

test(e2e): repro OAuth dead-ends when PAR dies before user completes (NO FIX)

docs(design): PAR expiry, heartbeats, and clean-exit strategy

feat(auth-service): keep PAR alive while user sits on OTP / recovery form

test(e2e): cover @par-heartbeat liveness end-to-end

feat(auth-service,pds-core): redirect to OAuth client on sign-in failure instead of stranding the user

docs(design): record heartbeat + clean-exit landed in the design doc

fix(demo): mark /client-metadata.json route dynamic so EPDS_CLIENT_THEME takes effect

fix: address PR #154 review feedback (CodeRabbit + Copilot + SonarQube + Blacksmith)

fix(demo): default EPDS_CLIENT_THEME to amber so client-branding e2e passes out of the box

test(e2e): rename "the user can try again" to "the OTP entry boxes are visible and enabled" and assert on every box

fix(auth-service): forward no_heartbeat through recovery Verify form too

test(auth-service,shared): bring new heartbeat / clean-exit code to 100% coverage

fix: address SonarCloud quality-gate findings on PR #154

test(auth-service): unit-test buildEpdsCallbackUrl + ratchet down functions threshold

fix: address third-round PR #154 review feedback

test(auth-service): replace `q.get(name)!` with a typed helper to clear Sonar S6606

refactor(shared): extract resolveStartOverHref to fix Sonar dup-block gate

fix(auth-service): inline "Send a new code" action on expired-OTP error

test(e2e): allow inline action button alongside the OTP error message

fix(auth-service): don't offer Resend when it cannot complete the sign-in

test(auth-service): extract heartbeat-router test harness + replace ReDoS-prone regex